Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Administrator account protection

21 Jan 2010   #1
anon

Windows 7 Ultimate
 
 
Administrator account protection

Is there anyway that I can stop my administrator account in Windows 7 Ultimate from having its status, permissions and password changed by other administrators? My brother (who is younger than me) keeps putting my account down to standard, and once changed my password. Unfortunately he is an administrator as well. Is there any way I can prevent him doing this without removing his administrator status?


My System SpecsSystem Spec
.
21 Jan 2010   #2
Dwarf

Windows 8.1 Pro RTM x64
 
 

Sorry, but no. If it is your machine (and he has been doing this on a regular basis), then downgrade his account to a standard one. Change the password on your account to one that he doesn't know so that he can't elevate. Even better, create a new administrator account for use when you need administrative privileges, set a password which only you know (don't disclose this to your brother) and then make your own account standard as well. If you need administrative privileges, you can always elevate yourself. In addition, see Secure Logon - Press CTRL + ALT + DELETE to log on
My System SpecsSystem Spec
21 Jan 2010   #3
quochunguit

Windows 7 Professonal
 
 

As I know that, If you don't have Administrative permission, you can not prevent him changing your pwd.

Administrator can change User's password without having old password.
My System SpecsSystem Spec
.

21 Jan 2010   #4
Barman58

Windows 10 Pro x64 x3, Ubuntu
 
 

One thing you could do that would form a compromise is to set your ID as admin or create a new admin level user and then create a power users level group which will have enough access to do all that the admin can except change/reset passwords.

Once created, by setting any user in this group they will be able to everything they need to do but not mess with admin passwords.

If you wish to be cruel you could of course set-up his account as a standard user set it so the password never expires and cannot be changed, of course you could then invoke the parental controls to severely limit his access times and areas. - but that would be cruel
My System SpecsSystem Spec
22 Jan 2010   #5
anon

Windows 7 Ultimate
 
 

Quote   Quote: Originally Posted by Barman58 View Post
One thing you could do that would form a compromise is to set your ID as admin or create a new admin level user and then create a power users level group which will have enough access to do all that the admin can except change/reset passwords.

Once created, by setting any user in this group they will be able to everything they need to do but not mess with admin passwords.

If you wish to be cruel you could of course set-up his account as a standard user set it so the password never expires and cannot be changed, of course you could then invoke the parental controls to severely limit his access times and areas. - but that would be cruel
How do I make the power users level group with enough admin rights except password and account type change? This seems to me the best option. Thanks to everybody for your help.
My System SpecsSystem Spec
22 Jan 2010   #6
Barman58

Windows 10 Pro x64 x3, Ubuntu
 
 

Assuming you are using pro or ultimate a lot of the work has already been done for you

There is an existing group auto generated called "Power Users" - to access this you will need access to the advanced user account controls.

Shawn brink has a tutorial for allowing access to this ....

Control Panel - Add Advanced User Accounts

Once you have this working you should be able to remove the users account from the administrators group and add it to the power users group.

Once you have done this you can check that the requred security is in place

This should do what you want to do but if you need to tweak the actual group rights the individual rights assignment for each group is controlled using the group policy editor - local policies - user rights assignment.

Each right is listed with an explanation of what the right allows and any group can be added or removed as required

To be honest I would reduce his rights to a standard user and change your password, but I understand that family politics may prevent this option.

Also I must state that given physical access to the machine it is possible to, using freely available tools, override all Microsoft's login security.
My System SpecsSystem Spec
30 Jan 2010   #7
anon

Windows 7 Ultimate
 
 

Can you name any software to override the login?
My System SpecsSystem Spec
30 Jan 2010   #8
Tepid

Win 7 Ultimate 32bit
 
 

Quote   Quote: Originally Posted by anon View Post
Can you name any software to override the login?
Yes, but no. However, there are many posts around this forum that give that info.

I would do what others suggested.
I personally would use the Parental Controls also in this case.

See what they are doing when you are away.

The last surefire way of keeping them from using the system at all is to set a BIOS boot password.
My System SpecsSystem Spec
05 Feb 2010   #9
anon

Windows 7 Ultimate
 
 

Quote   Quote: Originally Posted by Tepid View Post
Quote   Quote: Originally Posted by anon View Post
Can you name any software to override the login?
Yes, but no. However, there are many posts around this forum that give that info.

I would do what others suggested.
I personally would use the Parental Controls also in this case.

See what they are doing when you are away.

The last surefire way of keeping them from using the system at all is to set a BIOS boot password.
I hear the BIOS password can be reset or removed by simply taking the BIOS battery out of the motherboard for a period of time, usually around 5-10 minutes.
Also how can I see what they are doing while I'm away?
And why not name any override tools?
Thanks
My System SpecsSystem Spec
05 Feb 2010   #10
PoPPeR

XP Vista 7
 
 

"I hear the BIOS password can be reset or removed by simply taking the BIOS battery out of the motherboard for a period of time, usually around 5-10 minutes.
Also how can I see what they are doing while I'm away?
And why not name any override tools?
Thanks "

that will reset the motherboard clock and what not, but not the BIOS password. and it happen almost instantly. don't need to wait 5-10 minutes
My System SpecsSystem Spec
Reply

 Administrator account protection




Thread Tools




Similar help and support threads
Thread Forum
My Administrator account turned to Guest account
Hey guys. Im having a problem with my computer!somehow my administrator account has turned to a guest account. Today I tried to unistall a program and it didnt let me saying i needed to be admin. :(:(. Also I tried turning it to admin by using cmd command but it says access not allowed.
General Discussion
User Administrator Account won't allow Administrator Privilages
Hi, I'm running Win 7 Pro x64 and Office 2007. I installed a Bluetooth transceiver recently and developed a problem when replying to email in Outlook 2007. When I select an email to reply, the email editor pops up with a "Custom UI Runtime Error in Send to Bluetooth." The solution to this issue...
General Discussion
User account corrupted, administrator account not accessible
My Windows7 suddenly displayed a default desktop. I then did an unsuccessful system restore, tried the undo and got stuck. From there on, when I want to log in I end up at the error message "The user profile service failed the logon. User profile cannot be loaded". I tried to activate the...
BSOD Help and Support
Quasi-Administrator account versus a true Adminstrator Account?
Hello to all, I am using W7 Ultimate 64 bits. I am have a what has been described on this forum as a quasi-administrator account. It is not called Administrator but seems to function as one. UAC prompts, when admin rights required in user accounts, this account's password will fulfil the...
General Discussion
Renaming the administrator account back to Administrator
Hi, I have an Acer laptop which came with one user account, Acer, with the administrator right. When I tried to rename it to Administrator or administrator, I got an messages saying that user name has already existed. How do I rename Acer to Administrator? Thanks.
General Discussion
Default User Account (Administrator) acts like Standard Account
I am using Windows 7 Pro 64x and apparently the default user account (Owner) that I use is not working correctly. Unless I have UAC set to Never Notify, I cannot open Control Panel or UAC again. When I try, I get the error message listed below. I have created a second user account as Administrator...
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 03:49.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App